This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @pulumi/pulumi from 3.74.0 to 3.76.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **3 versions** ahead of your current version.
- The recommended version was released **25 days ago**, on 2023-07-26.
Release notes Package name: @pulumi/pulumi
[cli/state] Adds pulumi state edit an experimental developer utility for manually editing state files. #13462
[programgen] Allow binding unsupported range and collection types in non-strict mode for pulumi convert #13459
[programgen/nodejs] Improve static typing of config variables in main program #13496
[sdk/{go,nodejs,python}] Add support for reporting resource source positions #13449
[sdk/{nodejs,python}] Support explicit providers for packaged components #13282
Bug Fixes
[cli/config] Pulumi no longer falls back on old config when config resolution fails (except for pulumi destroy --stack <stack-name> where the config may be unavailable). #13511
[cli/new] Fix the use of uninitalized backend when running new with --generate-only. When --generate-only is set new will skip all checks that require the backend. #13530
[engine] Fix alias resoloution when parent alieses where also aliased. #13480
[engine] Validate URNs passed via ResourceOptions are valid. #13531
[engine] Add a missing lock that could cause a concurrent map read/write panic. #13532
[programgen/go] Fix panic in GenerateProject when version is not set in schema #13488
[sdkgen/{go,nodejs}] Fix ReplaceOnChanges being dropped in Go and NodeJS codegen. #13519
[programgen/nodejs] Fix interpolated strings used as keys of maps #13514
[cli/plugin] Automatically install pulumiverse provider plugins during convert. #13486
[cli/plugin] Fix lookup of side-by-side binaries when PULUMI_IGNORE_AMBIENT_PLUGINS is set. #13521
[sdk/python] Move some global state to context state for parallel updates. #13458
Miscellaneous
[programgen] Consistently use the same non-strict bind options when applicable #13479
[programgen] Propagate SkipRangeTypechecking option down to program components #13493
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @pulumi/pulumi from 3.74.0 to 3.76.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **3 versions** ahead of your current version. - The recommended version was released **25 days ago**, on 2023-07-26.
Release notes
Package name: @pulumi/pulumi
chore: post-release go.mod updates
Features
[cli/state] Adds
pulumi state editan experimental developer utility for manually editing state files.#13462
[programgen] Allow binding unsupported range and collection types in non-strict mode for pulumi convert
#13459
[programgen/nodejs] Improve static typing of config variables in main program
#13496
[sdk/{go,nodejs,python}] Add support for reporting resource source positions
#13449
[sdk/{nodejs,python}] Support explicit providers for packaged components
#13282
Bug Fixes
[cli/config] Pulumi no longer falls back on old config when config resolution fails (except for
pulumi destroy --stack <stack-name>where the config may be unavailable).#13511
[cli/new] Fix the use of uninitalized backend when running
newwith --generate-only. When --generate-only is setnewwill skip all checks that require the backend.#13530
[engine] Fix alias resoloution when parent alieses where also aliased.
#13480
[engine] Validate URNs passed via ResourceOptions are valid.
#13531
[engine] Add a missing lock that could cause a concurrent map read/write panic.
#13532
[programgen/go] Fix panic in GenerateProject when version is not set in schema
#13488
[sdkgen/{go,nodejs}] Fix ReplaceOnChanges being dropped in Go and NodeJS codegen.
#13519
[programgen/nodejs] Fix interpolated strings used as keys of maps
#13514
[cli/plugin] Automatically install pulumiverse provider plugins during convert.
#13486
[cli/plugin] Fix lookup of side-by-side binaries when PULUMI_IGNORE_AMBIENT_PLUGINS is set.
#13521
[sdk/python] Move some global state to context state for parallel updates.
#13458
Miscellaneous
[programgen] Consistently use the same non-strict bind options when applicable
#13479
[programgen] Propagate SkipRangeTypechecking option down to program components
#13493
Features
[programgen/{dotnet,go,nodejs,python}] Allow generating code for unknown invokes (tf data sources) in non-strict mode
#13448
[programgen/go] Adds explicit package versioning to Golang codegen
#13136
Bug Fixes
[sdk/go] Fix downloading of unimported external plugins.
#13455
[cli/new]
pulumi new -s 'org/project/stack'checks the specified organization for project existence rather than the currentUser.#13234
[cli/new] When providing a
--stackand--nametopulumi new, the project names must match before creating Pulumi.yaml.#13250
[cli/plugin] Fix interpolation of vesion into http plugin source URLs.
#13447
[sdk/nodejs] Add dependency on @ opentelemetry/instrumentation
#13278
[sdk/nodejs] Node.js dynamic providers mark serialized functions as secret if they capture any secrets
#13329
[sdk/python] Python dynamic provider serialized code is now saved to state as secret.
#13315
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs